C_HRHFC_2311 試験問題を無料オンラインアクセス

Refer to the exhibit, which contains a session diagnostic output.

Which statement is true about the session diagnostic output?

• A.The session is a bidirectional TCP connection.
• B.The session is a bidirectional UDP connection.
• C.The session is in TCP ESTABLISHED state.
• D.The session is a UDP unidirectional state.

Which timeout setting can be responsible for deleting SSL VPN associated sessions?

• A.SSL VPN dtls-hello-timeout
• B.SSL VPN idle-timeout
• C.SSL VPN login-timeout
• D.SSL VPN http-request-body-timeout

FortiGate is configured as a policy-based next-generation firewall (NGFW) and is applying web filtering and application control directly on the security policy. Which two other security profiles can you apply to the security policy? (Choose two.)

• A.DNS filter
• B.Antivirus scanning
• C.Intrusion prevention
• D.File filter

Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

• A.The common name on the subject field must use a wildcard name.
• B.The CA extension must be set to TRUE.
• C.The issuer must be a public CA.
• D.The keyUsage extension must be set to keyCertSign.

Refer to the exhibit.

Review the Intrusion Prevention System (IPS) profile signature settings. Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?

• A.The signature setting includes a group of other signatures.
• B.The signature setting uses a custom rating threshold.
• C.Traffic matching the signature will be silently dropped and logged.
• D.Traffic matching the signature will be allowed and logged.